Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
File: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft (raw, json)
Hash identifier: iBvVBF0sONjz/UadxNfRwxU5rTukebP//+7n9MsZfaQ=
Subject key identifier: 3F:73:BE:D4:63:6B:72:CC:55:5A:F1:D1:AA:BA:89:AE:26:68:04:18
Authority key identifier: 5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
Certificate issuer: /CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Certificate serial: 0198D54E46929F6C182FA6C866370D0D3CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 05:02:13 +0000
Manifest this update: Sat 23 Aug 2025 05:02:13 +0000
Manifest next update: Sun 24 Aug 2025 05:02:13 +0000
Files and hashes: 1: W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl (hash: C7S/vT4+NqEGkT1mVmI+HhyA79Hn1MbFQWyvsdyozak=)
2: tB5aBJS3V73LTF4Y_ajxS_KE82E.roa (hash: 9K+XAgVeIkD6/9g1gviP3PsjTP4VKXdwP9YBlFoakdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:46:92:9f:6c:18:2f:a6:c8:66:37:0d:0d:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b9a40fc3f350abda59dbfc01ca37a46d8d74764
Validity
Not Before: Aug 23 05:02:13 2025 GMT
Not After : Aug 24 05:02:13 2025 GMT
Subject: CN=3f73bed4636b72cc555af1d1aaba89ae26680418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:20:35:14:c6:f6:00:d2:a7:06:83:27:2d:0b:
6c:22:bb:d1:f1:6a:a9:72:89:ae:9a:07:03:33:e3:
f5:bc:71:26:86:5f:cd:4d:ab:6a:d2:fd:59:bc:c7:
9d:44:3b:6e:77:96:af:26:75:51:c2:76:e6:7f:94:
ce:fe:47:03:54:29:00:35:27:81:f6:a3:66:14:76:
4c:f8:0d:02:4f:dc:15:f7:89:34:a1:20:f1:e2:1f:
64:1f:3a:c7:4b:02:35:8b:6f:e0:22:29:7c:7d:de:
af:5f:6b:b4:84:ec:48:2d:20:be:7e:85:33:5b:28:
24:5e:c6:12:8c:ea:0a:9c:d0:fa:44:be:91:fc:77:
0d:ba:f5:0c:ab:35:c4:6d:89:15:88:83:a4:b8:52:
92:29:d8:5d:22:46:29:be:f3:88:4f:08:38:69:19:
bf:5d:e1:8e:f7:5b:61:4b:d9:d2:26:28:d1:6c:39:
ca:58:28:6f:04:43:d7:ba:af:23:4a:70:f9:59:f9:
f8:4e:3a:ad:45:04:16:b3:f8:33:f8:58:ed:a8:9e:
a6:c6:9d:f1:8a:6d:ca:b2:d0:9d:53:7d:e8:c5:94:
7f:69:68:6d:ae:36:9f:e4:6d:d7:3b:e3:a7:67:4e:
07:3e:ad:7d:60:2f:04:4d:98:e7:ae:c2:75:08:85:
4c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:BE:D4:63:6B:72:CC:55:5A:F1:D1:AA:BA:89:AE:26:68:04:18
X509v3 Authority Key Identifier:
keyid:5B:9A:40:FC:3F:35:0A:BD:A5:9D:BF:C0:1C:A3:7A:46:D8:D7:47:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2eede6-fc20-4f8a-ae29-72537526aee2/1/W5pA_D81Cr2lnb_AHKN6RtjXR2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dc:03:2e:74:64:ec:7b:46:ba:94:b1:d4:5e:88:4e:c6:ac:
77:f9:85:82:df:fc:4e:ef:51:93:b4:49:fe:c4:c5:bd:67:05:
d0:67:64:f1:71:e6:71:b5:ac:c4:f1:de:3a:69:80:e2:bc:4d:
b5:70:6e:dd:25:93:aa:97:30:49:ab:65:2e:a4:ba:43:54:a5:
27:8b:46:20:9b:ce:99:3d:4b:36:de:0b:71:52:15:28:9a:a7:
a8:23:06:98:1a:ed:7b:1e:e4:9f:76:8a:67:ba:91:5f:cf:04:
d9:69:1d:b2:f2:6a:62:23:25:a3:14:7b:5a:45:8d:56:4c:32:
c8:22:29:6f:8d:0e:a4:d4:d9:eb:05:13:e7:ce:ae:c5:a1:b8:
0a:06:43:18:da:47:ba:24:fe:d5:69:04:32:f2:2e:68:8d:99:
9d:47:3e:56:b2:d2:d3:ce:cc:5d:0f:b4:5d:e2:b0:e3:ef:17:
4a:f5:0d:03:ba:0f:c6:6f:6c:69:4c:21:cc:34:8f:8e:10:f4:
0a:55:b8:2b:8f:4d:aa:6e:14:9d:37:e2:dc:05:19:b9:32:a8:
e3:6c:40:db:9a:f0:ae:6b:63:b5:95:86:31:f7:37:ef:dd:d2:
97:da:60:c0:15:c2:55:6d:d4:fa:0d:f8:8c:c2:d1:e3:27:d0:
dc:f2:15:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:29 2025 by rpki-client